$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa File: 9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa (raw, json) Hash identifier: FTkGwbc6odehaDWOs2ncr5yCfuIyVrZ+OViT7MEN910= Subject key identifier: 4E:53:ED:D3:0C:4B:78:13:AA:85:15:53:0D:32:C9:A2:5A:FB:40:48 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE5988DEBF2B7D470DFF802C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa Signing time: Fri 15 Aug 2025 21:10:37 +0000 ROA not before: Fri 15 Aug 2025 21:10:37 +0000 ROA not after: Thu 13 Nov 2025 22:10:37 +0000 asID: 31898 IP address blocks: 204.216.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:88:de:bf:2b:7d:47:0d:ff:80:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:37 2025 GMT Not After : Nov 13 22:10:37 2025 GMT Subject: CN=871ca3a8-f186-4da6-b336-b156c88ba441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:b9:9a:ce:d1:ba:12:43:b1:96:1c:ef:05: 22:9a:2e:c9:30:dc:cd:26:11:b4:79:9d:ca:20:42: 12:cd:bb:e6:85:0d:f5:fe:22:71:d7:5d:e1:a2:03: 1f:34:2e:00:dd:6a:ff:9e:76:73:ee:36:82:30:82: e7:61:98:89:60:85:45:1e:2d:08:ad:2d:a8:c2:1a: b3:39:cc:fb:4d:48:7b:ac:b6:0a:82:90:98:2c:ee: a1:27:9e:ba:9f:2f:4f:19:fd:72:a4:d9:d2:85:3f: eb:03:c9:ea:8f:48:66:71:78:04:f2:ff:b4:ef:21: 2a:e9:ec:1a:51:35:db:a0:0a:b5:fe:4f:c1:10:96: 46:c7:14:17:b1:f4:9a:38:97:c5:7e:be:14:a7:d7: b0:eb:74:2a:49:3b:72:ff:2b:3c:60:45:39:8c:12: 5c:2d:f6:9b:66:de:76:dc:c7:b7:ef:df:85:5b:6a: 66:85:54:34:59:ba:31:ec:f9:0f:2a:7a:ce:b9:cf: 98:ea:b5:2b:8c:0b:a3:73:43:34:9b:df:7b:4c:78: 96:e3:92:5f:c6:27:8b:9f:b5:7b:a1:b5:85:72:3f: 53:04:9e:87:3e:de:20:5b:39:01:68:d6:1b:b7:8b: 7c:da:ca:15:3a:16:14:f4:31:d6:4f:8e:1f:a1:d6: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:53:ED:D3:0C:4B:78:13:AA:85:15:53:0D:32:C9:A2:5A:FB:40:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d70e5d6-388b-3a60-9f19-4f0410f935c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7b:94:18:ae:c1:93:85:b2:d6:93:f7:a5:1b:b0:59:87:21: 5b:11:d1:9e:69:11:61:29:d0:39:91:cd:ff:f0:66:14:e0:46: b8:ff:78:2a:c0:67:24:c0:51:03:53:4d:88:94:88:ad:2d:5b: e2:6f:45:56:aa:0d:a4:fc:2e:01:35:e6:d3:26:25:37:00:8e: 4c:d8:19:23:05:34:89:8a:65:43:b9:d5:95:4b:6e:43:0a:a4: b2:1f:e5:dc:1c:ec:89:ae:f7:6c:2e:43:76:24:ed:d7:5a:c2: af:de:ca:e9:8d:e8:9d:ac:34:90:21:97:bd:26:aa:52:53:18: 3d:76:a3:a1:c6:24:4a:d4:d5:1e:f9:43:ac:12:7e:3f:02:34: 52:36:cd:51:32:40:04:68:07:86:00:5f:de:53:8b:d4:f9:d0: 30:35:ec:15:0c:de:e3:08:90:3b:00:a7:67:1b:c4:9a:42:0a: 92:35:23:66:08:1e:c4:ea:29:91:95:c2:35:94:1c:9b:ce:a0: 4a:5e:64:bf:27:7a:5d:b3:be:a0:ca:95:c9:99:30:3a:0c:f6: 10:82:95:12:2d:6b:36:fb:a9:0d:d2:de:62:e6:26:ca:26:5b: b3:af:f1:de:e3:d6:72:9e:03:38:53:f7:22:77:7c:2b:81:39: de:4f:e0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWYjevyt9Rw3/gCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAzN1oXDTI1MTExMzIyMTAzN1owLzEtMCsGA1UEAxMk ODcxY2EzYTgtZjE4Ni00ZGE2LWIzMzYtYjE1NmM4OGJhNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ye5ms7RuhJDsZYc7wUimi7JMNzNJhG0eZ3K IEISzbvmhQ31/iJx113hogMfNC4A3Wr/nnZz7jaCMILnYZiJYIVFHi0IrS2owhqz Ocz7TUh7rLYKgpCYLO6hJ566ny9PGf1ypNnShT/rA8nqj0hmcXgE8v+07yEq6ewa UTXboAq1/k/BEJZGxxQXsfSaOJfFfr4Up9ew63QqSTty/ys8YEU5jBJcLfabZt52 3Me379+FW2pmhVQ0Wbox7PkPKnrOuc+Y6rUrjAujc0M0m997THiW45JfxieLn7V7 obWFcj9TBJ6HPt4gWzkBaNYbt4t82soVOhYU9DHWT44fodaBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5T7dMMS3gTqoUVUw0yyaJa+0BIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWQ3MGU1ZDYtMzg4Yi0z YTYwLTlmMTktNGYwNDEwZjkzNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA17lBiuwZOFstaT96UbsFmHIVsR0Z5pEWEp0DmRzf/wZhTgRrj/eCrA ZyTAUQNTTYiUiK0tW+JvRVaqDaT8LgE15tMmJTcAjkzYGSMFNImKZUO51ZVLbkMK pLIf5dwc7Imu92wuQ3Yk7ddawq/eyumN6J2sNJAhl70mqlJTGD12o6HGJErU1R75 Q6wSfj8CNFI2zVEyQARoB4YAX95Ti9T50DA17BUM3uMIkDsAp2cbxJpCCpI1I2YI HsTqKZGVwjWUHJvOoEpeZL8nel2zvqDKlcmZMDoM9hCClRItazb7qQ3S3mLmJsom W7Ov8d7j1nKeAzhT9yJ3fCuBOd5P4D0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:56 2025 by rpki-client